Play for Java

Chapter 10. Security

This chapter covers

• Play security concepts
• Adding basic authentication with filters
• Fine-grained authentication with action composition

In this chapter, we’ll first look at Play 2 security concepts to understand what it means from a developer’s point of view to secure your application. We’ll review the different types of attacks our application can be exposed to and the tools Play 2 provides to secure our application. We’ll then move forward to actually implement security in our application, with basic authentication as an example, using filters. This section shows a low-level framework security implementation, but of course Play provides built-in helpers for authentication and authorization. Last, we’ll see how to ...